Installing a Business Automation Insights production deployment

Edit online

Follow these procedures to install a stand-alone production deployment of IBM Business Automation Insights.

Before you start installing IBM Business Automation Insights, it is important to understand what you need, what options you have, the entitlement of your license, and how you can measure the usage of your deployments. For more information, see , and System requirements for IBM Business Automation Insights.

To install a production deployment of IBM Business Automation Insights follow these procedures:
  1. Install the operators.
  2. Install Business Automation Insights production deployment.
  3. Get connection information about the Kafka service.
  4. Get connection information about the Elasticsearch service.

Install the operators

When installing the operators, you have two options, preparing your cluster for an online deployment, or preparing your cluster for an air-gapped (offline) deployment.

Online deployment

When preparing your cluster for an online deployment, make sure that you prepare your environment and install the necessary software before you go to the resources to install the IBM certified software.

Follow the procedure in Preparing your cluster.

Air-gapped (offline) deployment

If your cluster is not connected to the internet, you can install Business Automation Insights stand-alone in an air-gap environment with the IBM Catalog Management Plug-in. Use either a bastion host, or a portable compute/storage device to transfer the images to your air-gap environment.

Follow the procedures in Preparing your cluster for an air-gapped (offline) deployment.

Install Business Automation Insights production deployment

Note: Business Automation Insights Kafka components only support self-signed certificate that they generate.

Follow this procedure to install the Business Automation Insights production deployment.

  1. Go to cert-kubernetes/descriptors/sub-operator/BAI, and find the following CR templates:
    • ibm_cp4a_cr_production_bai.yaml
    • ibm_cp4a_cr_production_FC_bai.yaml

    See Preparing a client to connect to the cluster to learn how to get cert-kubernetes.

  2. Open the CR templates, and find the license URL (line 22), https://www14.software.ibm.com/cgi-bin/weblap/lap.pl?li_formnum=L-PSZC-SHQFWS
  3. Open the URL in a web browser, and accept the license.
  4. Generate the CR based on the above CR templates, and then check and complete it:

    1. Set ibm_license to accept if you agree with the License in step 3.

      Note: Installation stops if you do not accept the license.

    2. Provide ldap_configuration section by preparing ldap bind secret, ldap ssl cert secret. If your ldap is ssl enabled, then add your ldap user to bai_configuration.admin_user.

    3. Prepare 3 storage classes (medium, fast file storage classes, and block storage class) and set them to your CR.

    4. Set bai_configuration.<job>.install as true and set the correct parallelism. See Increasing job parallelism for event processing.

      <job> can be bpmn, icm, odm, content, or bawadv.

  5. Deploy the CR oc apply -f cr.

  6. Validate your deployment.

    1. Check the CR status.

      When one of the following messages appears, Business Automation Insights is ready.

      status.components.bai.bai_deploy_status: Ready
status.components.bai.insightsEngine: Ready

    2. Find Business Automation Insights URL from <CR_Name>-cp4ba-access-info configmap, and login with the ldap user.

Get connection information about the Kafka service

To get Kafka service connection information, follow the procedure in Retrieving information for connection to Kafka.

Get connection information about the Elasticsearch service

Follow this procedure to get Elasticsearch service connection information.

  1. Log in to the namespace where the Cloud Pak for Business Automation platform is deployed.

    oc project <bai deployed project>

  2. Get Elasticsearch URL by running the following command:

    ES_URL=(oc get Elasticsearch iaf-system -o jsonpath='{.status.endpoints[?(.scope=="External")].uri}')

    There is not a separated port value. The default value is 443.

    ES_PORT=443

    Elasticsearch certification secret name:

    ES_CERTIFICATION_SECRET=(oc get Elasticsearch iaf-system -o jsonpath='{.status.endpoints[?(.scope=="External")].caSecret.secretName}')

  3. Get Elasticsearch user information by running the following command:

    ES_SECRET=$(oc get Elasticsearch iaf-system -o jsonpath='{.status.endpoints[?(.scope=="External")].authentication.secret.secretName}')
ES_USERNAME=$(oc get secret ${ES_SECRET} -o jsonpath='{.data.username}' | base64 -d)
ES_PASSWORD=$(oc get secret ${ES_SECRET} -o jsonpath='{.data.password}' | base64 -d)